This memo outlines important points to consider when drafting management responses to audit observations. It focuses on the key considerations of a well-written management response, explains the S.M.A.R.T. procedure, answers frequently asked questions, and provides additional resources.
At the conclusion of each audit, upon issuance of the draft report, management of the audited unit is responsible for developing and implementing an action plan that will remediate any risks associated with the observations noted during the audit. This written action plan is known as the management response. Written management responses to audit observations are a crucial step toward remediating potential risks and should address the complete action plan.